PSRule.Rules.Azure

PSRule.Rules.Azure copied to clipboard

[BUG] Custom policy appears to be incorrectly converted by Export-AzPolicyAssignmentRuleData

1

### Existing rule _No response_ ### Description of the issue It appears that `Export-AzPolicyAssignmentRuleData` inverts the behavior of our custom policy. Custom policy: ```custom-policy.json { "properties": { "displayName": "some-tag-policy -...

ThijmenDam

[BUG] False positives for rule AZR-000279?

3

### Existing rule Azure.Deployment.OutputSecretValue (AZR-000279) ### Description of the issue Perhaps I am missing something, but it seems that AZR-000279 is incorrectly flagged in the following situation. Our team implements...

ThijmenDam

### Existing rule _No response_ ### Suggested rule When service bus replication is configured any configured locations should be in the allowed location list if configured. ### Pillar Security ###...

BernieWhite

### Existing rule _No response_ ### Suggested rule Any configured additional locations of fleet resources should be within allowed locations if configured. ### Pillar Security ### Additional context _No response_

BernieWhite

### Existing rule Azure.VNG.MaintenanceConfig ### Suggested rule Promote `Azure.VNG.MaintenanceConfig` to GA rule set because it is no longer in preview. ### Pillar Reliability ### Additional context _No response_

BernieWhite

### Existing rule _No response_ ### Suggested rule Now that Entra ID auth is available for use in MongoDB vCore clusters (in preview) for `Microsoft.DocumentDB/mongoClusters`, this should be used instead...

BernieWhite

[RULE] Event Grid namespace requires using TLS 1.2 or later

2

### Existing rule _No response_ ### Suggested rule Add a rule to the security baseline to require TLS 1.2 or later for Event Grid namespace ### Pillar None ### Additional...

sebassem

### Existing rule _No response_ ### Suggested rule When pulling in external files that will be executed such as scripts a pinned URL should be used, to prevent the file...

BernieWhite

### Existing rule Azure.VM.PublicKey ### Suggested rule Add support for `Microsoft.AzureFleet/fleets` with a new rule similar to `Azure.VM.PublicKey`. ### Pillar Security ### Additional context https://learn.microsoft.com/en-us/azure/templates/microsoft.azurefleet/fleets?pivots=deployment-language-bicep

BernieWhite

### Existing rule _No response_ ### Suggested rule Check for cases when a sensitive value is set on a non-secure property. ### Pillar Security ### Additional context _No response_

BernieWhite